ATKey FIDO2 Security Key AAGUIDs

The FIDO2 specification defines a standardized method for identifying authenticators using an AAGUID (Authenticator Attestation GUID). An AAGUID is a 128-bit identifier that indicates the type of authenticator, such as its brand and model.

Each AAGUID is assigned by the manufacturer and must be consistent across all authenticators that are essentially identical, while remaining distinct from the AAGUIDs of all other authenticator types.

The AAGUID is represented as a string of hexadecimal characters in the following format:

for example, 7a98c250-6808-11cf-b73b-00aa00b677a7, which consists of five hexadecimal groups separated by hyphens (-).

New AAGUIDs are issued for:

• New products that support FIDO2, or

• Existing products when features are added, removed, or otherwise changed in a way that affects authenticator behavior.

Reference:

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-fido2-hardware-vendor